Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NEZujySqUcSo79ucOW1G62fFaiM.roa
File: NEZujySqUcSo79ucOW1G62fFaiM.roa (raw, json)
Hash identifier: inaa1i32BAnKkCRQroi9Aqxe1SwgUZ3U67s6NZmU60U=
Subject key identifier: 34:46:6E:8F:24:AA:51:C4:A8:EF:DB:9C:39:6D:46:EB:67:C5:6A:23
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570954F7B8D12740B845A118E8FE3B737
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NEZujySqUcSo79ucOW1G62fFaiM.roa
Signing time: Mon 02 Jan 2023 03:45:11 +0000
ROA not before: Mon 02 Jan 2023 03:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51121
IP address blocks: 93.170.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:4f:7b:8d:12:74:0b:84:5a:11:8e:8f:e3:b7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34466e8f24aa51c4a8efdb9c396d46eb67c56a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:93:42:c9:21:cf:eb:4c:3f:57:fa:9e:71:
85:1b:d2:b8:16:8a:49:ce:17:90:fd:88:78:22:3e:
fa:89:43:21:b5:2d:ec:29:39:ab:0b:ef:2e:1e:1b:
08:68:99:3e:b8:f9:c3:ad:bc:94:c6:b4:3b:a7:d1:
1c:dd:26:0f:f6:43:bd:ca:9f:d5:c0:c6:6f:c2:1b:
77:67:07:c9:44:61:ea:d6:cb:54:33:3c:79:45:e4:
1f:28:5c:b8:71:fb:4c:d7:e6:9b:2d:34:06:28:cb:
9b:81:aa:3a:87:ac:70:cf:36:89:5f:09:ea:b1:70:
20:88:7a:22:0f:a5:49:7a:7c:52:bb:20:f0:0c:2e:
8a:06:00:c9:30:1f:08:04:21:a8:28:17:e1:77:db:
24:3f:1b:3a:d2:35:b5:d1:7c:c1:b3:50:85:3e:6a:
5b:e9:56:c9:d7:09:8e:b5:0f:92:ca:2a:75:fd:8e:
ff:8c:a7:e8:97:9e:21:30:cc:9b:58:2e:7d:d1:69:
e9:16:62:f0:38:42:62:db:c0:48:4e:67:cc:49:e5:
5c:e7:71:31:ec:94:45:16:47:1c:33:a9:cf:94:46:
94:8b:d2:34:30:ec:22:98:fe:37:f5:d7:0d:1b:a0:
6d:ec:29:64:c4:0c:18:89:2b:49:40:96:9a:01:69:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:46:6E:8F:24:AA:51:C4:A8:EF:DB:9C:39:6D:46:EB:67:C5:6A:23
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NEZujySqUcSo79ucOW1G62fFaiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.144.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:78:d4:76:60:3d:eb:3d:e5:4e:96:f0:24:b9:bd:c8:da:49:
47:3a:7b:8b:a6:9e:38:74:61:b2:81:7f:07:ce:a3:ca:d6:f6:
f1:c1:e3:b5:89:ef:4a:e3:59:97:29:08:87:ad:a2:70:29:c9:
88:21:87:2e:63:5e:1a:14:fb:b3:d8:4d:a3:18:61:71:07:e9:
56:6f:59:f7:43:53:d0:34:72:6e:a5:64:7a:b8:11:4c:61:e8:
5d:bb:fb:09:8a:ae:9e:5c:92:fa:ee:82:fb:dc:cc:e5:4f:d8:
37:64:f7:11:da:54:1c:2d:73:cd:5e:8b:2e:be:1a:7a:f0:27:
f4:b9:72:2a:d0:a3:41:59:0a:b2:9a:48:a8:f5:69:ce:07:71:
07:ad:d3:0f:df:91:c3:3b:a2:f6:7e:f6:a9:27:fb:c2:ab:56:
e5:44:e0:3b:2e:7d:6a:29:30:d2:aa:06:9c:17:e3:85:32:be:
6d:ff:d0:87:d8:9f:32:10:4f:be:ee:db:73:06:a3:c0:7a:36:
06:15:f3:3d:51:c7:a4:cf:dd:27:e1:5c:76:e5:26:88:b1:54:
23:db:c3:c9:7a:c8:5b:b7:ad:01:19:23:45:bd:b4:f2:1c:9d:
8e:7b:c6:e6:26:3e:f6:5f:cc:e4:86:dc:3b:51:86:8f:1d:92:
08:43:e4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:35 2025 by rpki-client